Configuring Host Key Signature Algorithms

The host key signature algorithms to be used in server authentication and host-based authentication can be selected in the sshd2_config file using the HostKeyAlgorithms keyword. The keyword defines the host key signature algorithms that the server will propose and accept to authenticate the host. Using the keyword, it is possible to enable only certain hash functions, such as SHA-2. A message is signed with a hash generated using a signature algorithm and then verified by the receiver using the same signature algorithm. Multiple host key algorithms can be specified as a comma-separated list.

HostKeyAlgorithms ssh-dss-sha224@ssh.com

The client defines the order of host key signature algorithms. The client should have at least one algorithm in common with the server configuration. The supported signature algorithms are the following: